Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1f89351-6421-3942-8f3a-946c5852c603.roa
File:                     e1f89351-6421-3942-8f3a-946c5852c603.roa (raw, json)
Hash identifier:          ioCkcG/PFB6KZBa3R3JrOMRWpuGaJlRR6EoVm+JHXvc=
Subject key identifier:   7F:6F:D2:C2:25:56:AC:F5:10:1D:33:A0:CB:77:99:5A:A1:05:98:81
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845E193D1CFABA180342A697BC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1f89351-6421-3942-8f3a-946c5852c603.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     13188
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:d1:cf:ab:a1:80:34:2a:69:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=0e1a177c-4509-4047-971c-16aae1d3768a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:9e:44:cc:11:11:1c:69:13:98:49:fa:25:
                    99:3e:36:81:5c:69:9f:19:9c:96:b7:74:5b:91:cf:
                    b9:48:e8:92:c5:71:b8:07:87:75:27:fa:bc:da:a7:
                    20:ab:0a:d5:d2:31:df:8d:6c:bf:ff:30:fb:63:8b:
                    ba:36:8f:0c:21:bb:46:00:87:6d:49:35:64:97:3b:
                    82:72:f7:8a:13:1a:b8:83:a6:93:b2:b5:cd:25:ff:
                    4e:c1:06:4b:5c:05:13:b6:33:f0:4c:49:20:22:b1:
                    03:16:d2:8e:4d:7e:2e:b7:94:df:cd:56:4a:be:f7:
                    50:28:f6:06:b7:ab:80:de:49:d9:d8:b3:f1:6e:2a:
                    4b:d0:e8:9f:28:7c:86:83:eb:35:9b:5e:a4:f7:21:
                    f7:dc:d3:b3:95:ba:04:56:56:17:c3:d7:d8:39:4d:
                    ea:eb:d5:cb:bf:20:ee:1c:48:56:40:a6:fe:32:f9:
                    f2:80:6c:13:2f:62:5d:f6:eb:23:b1:3c:6f:7e:d8:
                    22:3e:63:ca:e6:fc:44:52:58:99:57:27:fa:f0:bd:
                    92:15:4c:2e:16:22:7f:b5:78:1a:9a:1d:27:73:cc:
                    67:8b:47:fb:3c:6f:02:45:fb:57:08:5a:77:89:1f:
                    f5:32:32:bd:f6:14:de:69:3e:33:25:8e:4d:be:ae:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6F:D2:C2:25:56:AC:F5:10:1D:33:A0:CB:77:99:5A:A1:05:98:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1f89351-6421-3942-8f3a-946c5852c603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:7b:b1:e4:4b:ac:b8:97:dd:37:cc:d2:28:b3:27:d3:b7:
         57:61:44:a8:b0:bb:0d:c9:17:71:c7:4a:79:17:97:30:1f:4c:
         f9:c5:d4:45:3f:84:c8:85:8f:48:9d:a2:1f:58:54:0f:00:93:
         60:d8:8c:8e:dc:5a:dc:86:9b:93:01:0a:4d:3b:ec:29:97:07:
         25:b1:62:1f:b5:e0:6a:91:d7:76:ec:16:f9:0c:dd:5e:19:a1:
         63:3e:e9:a7:cb:ee:e9:91:d1:9c:ed:6b:21:05:3a:ee:be:73:
         fa:cd:80:62:03:c0:ec:10:21:35:4c:45:71:9b:16:03:e2:05:
         08:06:63:b4:cd:39:73:64:e6:c6:a1:a2:03:d5:3b:24:41:27:
         a0:e3:8c:dd:23:71:79:a6:c7:ef:4c:36:7e:5f:5e:1f:53:cb:
         2d:3e:46:c4:19:7c:74:09:a3:2f:02:3e:12:9c:d5:64:96:77:
         5d:a4:0b:88:9f:f9:09:5d:be:66:77:3c:e6:0a:a7:d0:a0:cd:
         22:15:3a:a5:a2:e8:65:53:ff:d6:15:0c:5d:ef:3e:12:3d:ae:
         9d:d3:db:33:85:bb:81:48:ac:3e:86:58:ce:71:20:2f:5c:3b:
         41:3e:56:29:9d:2d:f9:a7:86:9f:49:f7:fe:e4:63:79:5b:47:
         55:a1:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:47 2024 by rpki-client on console-fra.rpki-client.org